CVE-2026-53202

A flaw was found in the Linux kernel's accel/ivpu component. A local attacker could exploit a signed integer truncation vulnerability in the Inter-Process Communication (IPC) receive path. This flaw occurs when a firmware-supplied data size is incorrectly converted, leading to an oversized memory copy operation that can overflow a kernel stack buffer. Successful exploitation could result in a denial of service through a kernel crash and potentially lead to privilege escalation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

If the Intel Versatile Processing Unit (IVPU) accelerator is not required, the ivpu kernel module can be blacklisted to prevent it from loading, thereby mitigating this vulnerability. To blacklist the module, create a file named /etc/modprobe.d/blacklist-ivpu.conf with the following content:

blacklist ivpu

After creating the file, regenerate the initramfs and reboot the system for the changes to take effect. This may impact functionality if the IVPU accelerator is actively used.